Saturday, April 24, 2010

Metasploit backdooring

With metasploit, it's possible to get any windows binary file and use it as a backdoor on a victims computer. You can gain metapreter shell at any point. All that needed is to embed the metasploit payload into any executable that you want.

Monday, April 19, 2010

Bluetooth discovery with Ruby

#!/usr/bin/ruby
#file: whereib.rb

deviceid = '00:0E:6D:29:38:EB'
devicename = 'Nokia 6600'

count = 0
while count <>
if `hcitool name #{deviceid}`.chomp == devicename
puts devicename + ' IN RANGE'
puts Time.now
else
puts devicename + ' OUT OF RANGE'
puts Time.now
end
sleep 7
end

Thursday, April 15, 2010

Best of Linux Network Tools via (apt-get install)

I collected a list of some of the best Linux networking tools that you can easily install via apt-get. I will be updating the list with time. So you can always check by for more. Hope it helps.

1. ngrep - grep for network traffic
install: sudo apt-get install ngrep


2. Tcptrace - Tool for analyzing tcpdump output
install:
sudo apt-get install tcptrace


3. Netdude - NETwork DUmp data Displayer and Editor for tcpdump trace files
install:
sudo apt-get install netdude


4. Dsniff - Various tools to sniff network traffic for cleartext insecurities
install:
sudo apt-get install dsniff


5. Hping3 - Active Network Smashing Tool
install:
sudo apt-get install hping3


6. Snort - Flexible Network Intrusion Detection System
install:
sudo apt-get install snort


7. Tcpdump - A powerful tool for network monitoring and data acquisition
install:
sudo apt-get install tcpdump

Tuesday, April 13, 2010

Bluetooth hack 2010 [2nd demo with latest phones]

Backtrack 4 tools on Ubuntu

For some of us who have found flexibility in using ubuntu, we lost option with the introduction of the increadible Backtrack distro. For thoses who are woundering what it is............you can cheack it out for your self here. Things is that it would take you forever downloading each interesting tool thats on backtrack to ubuntu. Just like ubuntu, backtrack has repositories where it updates all it's tools for it's users. So this is how you can simply get a ubuntu-backtrack touch on the same box.

First, you need to import the archive GPG key into your system
ronnie@blindsecurity:~$ wget -q http://archive.offensive-security.com/backtrack.gpg -O- | sudo apt-key add -

Now add the repository:
ronnie@blindsecurity:~$ sudo echo "deb http://archive.offensive-security.com pwnsauce main microverse macroverse restricted universe multiverse" > /etc/apt/sources.list

You can also add the Test repository(Only if you are a developer and know what you are doing). It's not meant for the ordinary users.
ronnie@blindsecurity:~$ sudo echo "deb http://sun.offensive-security.com/repotest/ ./" >> /etc/apt/sources.list